Course Catalog
Below are the courses available in the Illumio Training Annual Subscription program.
100 Quickstart - Pair Label Analyze Enforce
The 100-Quickstart-Pair-Label-Analyze-Enforce video series (P.L.A.N series) is a short, practical introduction to getting started with Illumio policy. In just four simple steps—Pair, Label, Analyze, and Enforce—you’ll learn how to move from visibility to a safe, meaningful first enforcement outcome. This series is designed for learners who are new to Illumio or short on time, and want a straightforward path to taking action quickly. It focuses on building enough context to begin safely, while creating a foundation for deeper policy work ahead.
101 Intro to Illumio
This introductory self-paced course offers a comprehensive overview of the Illumio Breach Containment Platform. You’ll gain insight into Illumio as a company, explore key concepts such as Illumio Insights and Illumio Segmentation, and discover how the platform secures networks across cloud environments and data centers. The course also introduces the platform’s core components and their functions, providing you with a solid foundation for understanding how Illumio helps contain breaches and protect critical infrastructure.
111 Onboarding
This self-paced course introduces the process of onboarding and managing workloads in the Illumio Console across both data center and cloud environments. Learners will explore how to deploy and manage Virtual Enforcement Nodes (VENs) and connect assets from AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). For the videos on Onboarding Cloud Assets: AWS, Azure, OCI, GCP, watch the video(s) that apply to your infrastructure. If you are taking the Certification exam, you will need to complete all of the videos.
121 Identify Assets
This series provides a step-by-step guide to identifying and organizing both data center and cloud assets using Illumio’s labeling and policy framework. You’ll learn how to create and manage labels, map cloud tags, define applications, and build foundational policy objects to enable effective segmentation and visibility.
133 Insights & Visibility
This course shows you how to use Illumio’s visibility and Insights features to understand your environment and traffic flows. You’ll learn how to map workloads with labels, use services and IP lists, and explore key views like Map, Traffic, and Mesh. You’ll also get an introduction to Illumio Insights and Insights Agent, and then finish with a short Knowledge Check to confirm what you’ve learned.
201 PCE Admin I
This course introduces the administration of the Policy Compute Engine (PCE) for those who have completed "Introduction to Illumio ZTS" course. You’ll learn how to use PCE commands, handle database operations and certificates, and perform basic troubleshooting, providing a solid foundation for managing the PCE.
202 PCE Admin II
This course offers a deep dive into the architecture and setup of the Policy Compute Engine (PCE), requiring completion of "Introduction to Illumio" course and "PCE Administration I." You’ll explore PCE types, installation and deployment options, health monitoring, report generation, and upgrade procedures.
211 Segmentation Policy Intro
This introductory course provides a foundational understanding of segmentation policy in Illumio. Learners will explore core policy concepts, including application and organizational policies, allow and deny rules, and how segmentation rules are structured, evaluated, and enforced across data center and cloud environments. Through practical explanations and console-based examples, the course demonstrates how to design effective segmentation strategies, develop policies in phases, and use deny rules to establish strong security boundaries while allowing approved communications. Learners will also gain insight into the provisioning process and how policy changes are prepared, versioned, and delivered to workloads.
221 Policy Cloud
This course introduces the fundamentals of Cloud Policy in Illumio. Learners explore core cloud policy concepts, including scope boundaries, intrascope communication, and extrascope rule design. Through practical, console-based examples, the course demonstrates how cloud policies are structured and enforced to control communication within and across cloud environments. A brief Knowledge Check concludes the course to reinforce key concepts and workflows.
231 Policy Data Center
This course introduces how to design and build scalable data center policy in Illumio using a phased segmentation strategy. Across 10 modules, you’ll learn the main types of policy, how to approach segmentation strategy, and how to progress from application-level controls to role-based policy—first for all services and then for specified services only. You’ll also learn how to write extrascope rules and IP list rules, and how to use organization policy deny rules. Finally, you’ll learn how to separate environments using organization policy. The course concludes with a Knowledge Check to confirm you can apply these concepts correctly.
241 Policy Endpoint
This introductory Endpoint course explains how Illumio Endpoint differs from traditional server segmentation and prepares learners to deploy and manage Endpoint in real environments. Learners begin by comparing server vs. endpoint VEN behavior and use cases, then walk through the endpoint pairing process to bring devices under management. From there, the course demonstrates how to create and apply endpoint policy, with practical, console-based examples that show how endpoint communications are controlled and validated. Finally, learners learn how policy and visibility behave across domain and non-domain interfaces, helping them anticipate common rollout considerations and avoid surprises during deployment. The course concludes with a Knowledge Check to confirm understanding of key endpoint concepts, workflows, and common considerations.
313 Policy Advanced
This advanced course builds on foundational Illumio segmentation knowledge to help learners design, interpret, and troubleshoot more sophisticated policy models. Learners will dive deep into how scopes shape policy intent and enforcement, including working with multiple scopes, label group policy, and the nuances of extrascope rule behavior through guided examples. The course also explores the full policy lifecycle and operational workflow—from draft to active to archive—so learners understand how changes can be provisioned and reverted if necessary. Through a series of real-world “complex policy” scenarios and hands-on console walkthroughs, learners will learn to evaluate policy outcomes, identify conflicts or unexpected behavior, and apply troubleshooting techniques with confidence. Finally, learners will be introduced to core services policy patterns and best practices, reinforced through multiple examples that demonstrate how to consistently enable essential services while maintaining strong segmentation boundaries. The course concludes with a Knowledge Check to confirm understanding of advanced policy concepts and common troubleshooting approaches.
321 Incident Response
In today’s threat landscape, even the strongest security posture can be breached. This self-paced course equips learners with a practical, step-by-step approach to incident response using Illumio. Participants will learn how to: Prepare for potential breaches by setting up labels, policies, and containment strategies in advance. Respond swiftly to isolate compromised systems, block malicious traffic, and maintain business continuity. Recover safely by investigating incidents, restoring operations, and refining future response plans. Learners will explore Illumio’s label-based segmentation model to enforce quarantine levels, automate containment, and support forensic investigations—all while keeping critical systems online.
331 Containers
This course will teach you the architecture, key concepts, and the integration requirements to use Illumio Segmentation for Kubernetes. You will learn how Illumio Segmentation provides visibility and segmentation for containerized applications. Before you take this course, please make sure you have taken the following course(s): 101 Introduction to Illumio Segmentation (Self-paced) before taking this course.
440 Illumio Network Enforcement Node
When a VEN cannot be installed for visualization purposes, Illumio has an extended policy model that utilizes switches and the switch interface called the Network Enforcement Node (NEN). This course allows users to gain familiarity with Illumio Core's NEN. This course is a standalone course that does not fall under any Learning Path.
550 Read Only Access
This course is designed for users with read-only access to the Illumio platform. It provides a high-level overview of key features, including mapping, labeling, and an introduction to policy. You'll learn how to navigate and interpret the Illumio interface, understand how labels organize workloads, and gain insight into how policies are structured—all without making changes to the environment.